HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountHighContained

AMERIPRISE FINANCIAL, INC.

bd_5f2a053599f5f3c9 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 18, 2026

Filed

Apr 17, 2026

To disclose

4 weeks

Affected · nationwide

47,876335 in this filing

Linked

16 filings

Confidence

65%

Full breach record for AMERIPRISE FINANCIAL, INC. →75 incidents on file

Ameriprise Financial, Inc. reported a data breach occurring on March 2, 2026, discovered on March 18, 2026. An unauthorized individual accessed stored data/files potentially containing personal information. 47,876 individuals were affected, including 335 Maine residents. Ameriprise engaged external cybersecurity experts, blocked access, and offered 12 months of Equifax credit/identity monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Mar 18, 2026 → Filed with AG Apr 17, 202630d ✓ ME AG ≤30d4 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 16 days

discovery → filing · 4 weeks / 30 days

Mar 2, 2026

Begins

Mar 18, 2026

Discovered

Apr 17, 2026

Filed

vs. sector median

4 wks faster

This filing is one of 16 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Vermont State AGbd_31751275b2b0456f2026-04-17Verified
Massachusetts State AGbd_4ca343f72bba0d382026-04-17Verified
New Hampshire State AGbd_5d8be0c5042fbeeb2026-04-17Verified
Iowa State AGbd_87d680adebf945392026-04-17Verified

Show 6 more filings ↓up to 103d gap

Indiana State AGbd_8dfab8a7a73e8fe02026-04-17Verified
Rhode Island State AGbd_ad81226da095b63e2026-04-17Verified
Nebraska State AGbd_c43425399ec1df102026-04-17Verified
South Carolina State AGbd_7bd8e49d9e00029b2026-04-20 · +3dVerified
Texas State AGbd_0f2775856e7200e12026-04-22 · +5dVerified
New Hampshire State AGbd_ecfe28f07939f2972026-07-29 · +103dVerified

Showing first 10 of 15 linked disclosures.

Name: AMERIPRISE FINANCIAL, INC.
norm: ameriprise financial
Domain: ameriprise.com
Industry: Financial Services

Name: AMERIPRISE FINANCIAL, INC.
norm: ameriprise financial
Domain: ameriprise.com
Industry: Financial Services
Industry: Financial Servicesllm

Discovered: Mar 18, 2026
Breach occurred: Mar 2, 2026
Undetected for: 16 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 17, 2026
Affected individuals: 47,876state + nationwide
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Maine Attorney General
Initial access: valid_credentials

During the incident: Launched an investigation with the help of external cybersecurity experts
Blocked unauthorized access upon discovery
Offering credit and identity monitoring through Equifax CompleteTM Premier for 12 months
Changes made: Implemented heightened monitoring of your account(s) to include enhanced identity verification procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: ME AG ≤30d · 30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Mar 18, 2026
→ Filed with AG: Apr 17, 2026
30d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Mar 18, 2026 → Filed with AG: Apr 17, 2026	30d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Vermont State AGApr 17 · first

Massachusetts State AGApr 17 · first

New Hampshire State AGApr 17 · first

Iowa State AGApr 17 · first

Indiana State AGApr 17 · first

Rhode Island State AGApr 17 · first

Nebraska State AGApr 17 · first

Maine State AGApr 17 · first · this page

South Carolina State AG+3d

Texas State AG+5d

New Hampshire State AG+103d

Pattern: first filing Apr 17 (VT), last Jul 29 (NH) — a 103-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 15 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d8179c59-c088-4bee-b3fe-ceb870a26508.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 17, 2026
Raw hash: eeff0a19f9174bad34f4a6efa5a0954fa41fb1dc2e41c3a2989149f5bf8b793c

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityAMERIPRISE FINANCIAL, INC.

Victim entityAMERIPRISE FINANCIAL, INC.

Incidentdiscovered Mar 18, 2026

Stated responseLaunched an investigation with the help of external cybersecurity experts

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov